...
This rule appears in the C Secure Coding Standard as MSC18-C. Be careful while handling sensitive data, such as passwords, in program code
Related Guidelines
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="13db91de-87cd-486a-8b33-edb6f927d39f"><ac:plain-text-body><![CDATA[ | [[MITRE 2009 | AA. Bibliography#MITRE 09]] | [CWE-259 | http://cwe.mitre.org/data/definitions/259.html] "Use of Hard-coded Password" | ]]></ac:plain-text-body></ac:structured-macro> |
| CWE-798 "Use of Hard-coded Credentials" |
Bibliography
<ac:structured-macro ac:name="unmigrated-wiki-markup |
...
" ac:schema-version="1" ac:macro-id="9f2544a0-3f92-4a57-a9e6-9185540cd398"><ac:plain-text-body><![CDATA[ | [[Chess |
...
2007 |
...
AA. |
...
Bibliography#Chess |
...
07] |
...
] |
...
11.2 |
...
Outbound |
...
Passwords: |
...
Keep |
...
Passwords |
...
out |
...
of |
...
Source |
...
Code | ]]></ac:plain-text-body></ac:structured-macro> | |||
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a3e3f9a9-8747-4f67-9e28-763c49851660"><ac:plain-text-body><![CDATA[ | [[Fortify 2008 | AA. Bibliography#Fortify 08]] | "Unsafe Mobile Code: Database Access" | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a63cb5ac-ab39-4be5-bc0d-3e831a628272"><ac:plain-text-body><![CDATA[ | [[Gong 2003 | AA. Bibliography#Gong 03]] | 9.4 Private Object State and Object Immutability | ]]></ac:plain-text-body></ac:structured-macro> |
...
49. Miscellaneous (MSC) MSC05-J. Store passwords using a hash function